Polyglot Desk — Privacy Policy

This Privacy Policy explains how the Polyglot Desk browser extension ("the Extension") handles data on your behalf. The Extension is published by Legendary Feather, a Mexican individual with business activity (Persona Física con Actividad Empresarial). It is offered through the Chrome Web Store and other extension marketplaces.

This policy applies specifically to the Polyglot Desk browser extension. The Legendary Feather web application (legendaryfeather.com) is governed by its own Privacy Policy.

1. Data Controller

Legendary Feather, operating as a Persona Física con Actividad Empresarial registered in Mexico, is the controller of any personal data processed in connection with the Extension.

Contact: legal@legendaryfeather.com

2. What the Extension Stores Locally

Everything below is stored only in chrome.storage.local on your device. It never leaves your browser unless you explicitly enable the Team (managed) tier. We have no access to it.

2.1 API keys you provide

• Ollama Cloud key — used by you to call Ollama's LLM endpoint for grammar correction, rewriting, and translation.
• Deepgram key — used for real-time speech-to-text (voice dictation) and speaker diarization.
• Cartesia key (recommended) — used for text-to-speech of translations. ~300ms latency, unlimited cloning at $49/month.
• ElevenLabs key (optional fallback) — used when Cartesia key is empty.

Your API keys are your credentials — you obtain them from each provider directly, you pay each provider directly, and you can revoke them at any time. We never see them.

2.2 Your settings

• Preferred languages (source / target).
• Real-time grammar checking toggle.
• Address-hover toggle.
• Translation underlines toggle.
• Agent name + company (for personalized reply suggestions).
• Agent tone preference (formal / casual).
• Dashboard language.

2.3 Content you create

• Phrase bank — canned response templates you compose.
• Teach rules — custom corrections you define.
• Translation memory — past translations you saved for reuse.
• Clipboard history — copy/paste items captured by the extension.

3. What the Extension Sends to Third Parties (and Where)

When you trigger a feature, the Extension makes a direct HTTPS request from your browser to the provider whose service powers that feature. Your data does not pass through Legendary Feather servers in the Free (BYOK) tier.

Each provider has its own privacy policy and data-handling terms:

• Ollama: ollama.com/legal/privacy
• Deepgram: deepgram.com/privacy
• Cartesia: cartesia.ai/legal/privacy-policy
• ElevenLabs: elevenlabs.io/privacy
• OpenStreetMap (Nominatim): osmfoundation.org/wiki/Privacy_Policy

4. What the Extension Does NOT Do

• No telemetry: we don't track which features you use, when, or how often.
• No analytics: no Google Analytics, no PostHog, no Mixpanel, no Sentry crash reporter calling home.
• No advertising: we don't sell, share, or rent your data to advertisers. We don't display ads.
• No browsing history: although the Extension's manifest declares <all_urls> access (required for the content script that paints underlines on any page), we do not read, store, or transmit the pages you visit.
• No background scraping: the Extension only acts when you trigger it (right-click, hover, hold mic key, etc.).

5. Permissions Explained

The Extension requests the following Chrome permissions. Each one is needed for a specific feature and is used only for that feature:

• contextMenus — adds the "Correct selection" right-click entry.
• storage — saves your settings, API keys, and phrase bank to chrome.storage.local.
• activeTab — interacts with the page you're currently viewing.
• scripting — injects the content script into pages where the static content script didn't run (e.g. Google Docs).
• windows — opens the detached translator window.
• tabs — sends messages to the right tab for translation results.
• <all_urls> host permission — required so the underline-on-hover feature works on any site where you want corrections (your CRM, Gmail, Front, etc.). We never read content on pages where you don't actively trigger a feature.

6. Microphone Access

When you activate voice dictation, the Extension requests microphone access via the browser's standard getUserMedia() prompt. The mic is active only while you hold the dictation hotkey. Audio is streamed in real time to Deepgram (your account) and never stored locally or remotely by the Extension. Releasing the hotkey terminates the WebSocket and the mic stream.

7. The Team (Managed) Tier — Different Data Flow

If you upgrade to the Polyglot Desk Team tier (paid, optional), the Extension routes calls through Legendary Feather's backend (legendaryfeather.com) instead of calling Ollama/Cartesia/Deepgram directly. In that mode:

• You do not provide your own API keys — your organization's admin pairs each agent with a managed account.
• Calls go: Extension → Legendary Feather backend → AI provider.
• We log call metadata (timestamp, agent ID, language pair, duration in seconds, character count) for billing and quota enforcement.
• We do not retain the audio or the text of your conversations beyond what's needed to return the response. Transcripts are written to your organization's account history only if the admin enables that feature.
• Detailed governance of the Team tier is in the main Legendary Feather Privacy Policy.

The Team tier is opt-in. Users on the Free (BYOK) tier never have data routed through our servers.

8. Cookies and Trackers in the Extension

The Extension does not set cookies. The popup, content script, and detached window store data exclusively in chrome.storage.local, which is sandboxed to the Extension itself and inaccessible to web pages.

9. Data Retention

Because the Extension stores data locally:

• Uninstalling the Extension removes all chrome.storage.local data for the Extension. There is nothing left on our servers (in BYOK mode) to retain or delete.
• You can clear individual settings, keys, or stored phrases anytime from the Extension's popup → Settings.
• If you ever paired the Extension with a Team account, your call metadata follows the retention rules of the main Legendary Feather privacy policy.

10. Children

The Extension is not intended for users under 16. We do not knowingly collect personal data from children under 16.

11. Your Rights

If you've never paired the Extension with a Team account, we have no data about you on our servers — there's nothing to access, correct, port, or delete. If you did pair it, your rights are described in the main Legendary Feather Privacy Policy: access, rectification, erasure, portability, restriction, objection, and complaint to your local supervisory authority.

12. Security

• All third-party API calls are made over TLS 1.2+ HTTPS.
• The Extension uses Chrome Manifest V3 — service worker isolation, no remote code execution, declarative content scripts.
• The Extension's Content Security Policy restricts outbound connections to a strict allowlist (Ollama, Deepgram, Cartesia, ElevenLabs, OpenStreetMap).
• API keys are stored in chrome.storage.local, which is sandboxed per-extension and not accessible from web pages.

13. International Transfers

By using the Extension you direct it to make HTTPS calls to the providers you choose, which may operate servers in the United States and other countries. Because the data flow is direct from your browser to those providers, the international transfer happens between you and them — not through Legendary Feather. Each provider lists its own data residency in their privacy policy.

14. Changes to This Policy

We will update this policy when the Extension's data handling changes (new third-party provider, new optional feature, new tier). Material changes are announced in the Extension's release notes on the Chrome Web Store and via a notification in the popup the first time you open the new version.

15. Contact

Privacy questions, complaints, or rights requests related specifically to the Polyglot Desk extension:
legal@legendaryfeather.com (subject line: "Polyglot Desk privacy")